Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/QmbF-Je-6rpAtziQhIAB6pU96x4.roa
File:                     QmbF-Je-6rpAtziQhIAB6pU96x4.roa (raw, json)
Hash identifier:          QQMH4Otk0V7BKgCDYBAlj3SuzRXmI/60Z2syvH/REcg=
Subject key identifier:   42:66:C5:F8:97:BE:EA:BA:40:B7:38:90:84:80:01:EA:95:3D:EB:1E
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       12
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/QmbF-Je-6rpAtziQhIAB6pU96x4.roa
Signing time:             Thu 20 Oct 2022 06:24:20 +0000
ROA not before:           Thu 20 Oct 2022 06:24:20 +0000
ROA not after:            Fri 20 Oct 2023 06:07:19 +0000
asID:                     9374
IP address blocks:        203.148.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct 20 06:24:20 2022 GMT
            Not After : Oct 20 06:07:19 2023 GMT
        Subject: CN=4266C5F897BEEABA40B73890848001EA953DEB1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:23:69:4a:e2:d1:07:e1:0f:21:0c:ad:94:
                    75:a7:00:fc:64:16:12:55:0e:95:cd:24:c1:b2:65:
                    1b:c3:96:5d:26:89:4c:d7:73:ab:42:d7:57:53:07:
                    1f:7c:9c:be:9f:17:4e:08:54:a4:1d:fb:b5:3d:7e:
                    46:df:cb:78:b3:39:34:97:9f:27:22:00:d6:0d:52:
                    ac:3f:9e:09:01:a6:c8:6f:09:97:84:60:1a:53:f1:
                    eb:7d:ed:21:ae:0b:3e:71:0c:d1:91:bf:ea:51:9f:
                    5f:5c:ee:70:91:4d:dd:3e:55:eb:59:28:6c:0c:a8:
                    3a:7a:91:da:4c:a2:aa:81:49:cb:76:70:4e:cf:b8:
                    30:d1:0c:17:e2:8d:70:de:5d:ab:be:05:b3:89:13:
                    86:f5:50:08:3f:e4:b8:80:a1:ad:7a:b9:41:0d:48:
                    01:db:4b:22:dd:fa:8c:2a:31:42:73:7e:7a:1f:31:
                    c7:c5:6d:a3:a1:f8:43:0f:e2:85:57:7f:73:ba:71:
                    1a:a3:33:01:29:a8:17:49:02:3b:a5:00:4f:11:3c:
                    2f:71:32:96:b9:5f:b5:c2:1f:13:28:27:dc:81:7e:
                    5b:59:3b:bd:a6:ce:45:99:23:52:01:6c:d0:cc:61:
                    4b:97:d7:f6:f9:ac:f6:e6:1a:46:18:3a:d2:67:ca:
                    42:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:66:C5:F8:97:BE:EA:BA:40:B7:38:90:84:80:01:EA:95:3D:EB:1E
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/QmbF-Je-6rpAtziQhIAB6pU96x4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.148.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4a:c3:91:10:39:57:42:6a:b0:78:5d:f6:a0:6e:8a:91:a5:ed:
         36:b4:2c:b8:bc:3a:a4:d6:0c:91:95:45:66:c5:68:65:c1:58:
         cd:d5:f7:59:d2:8d:13:9d:4a:37:0e:af:9c:db:6d:f7:ae:f8:
         59:63:e0:16:12:8d:f7:75:18:9f:61:89:a3:29:5b:97:87:a7:
         1f:45:6f:8d:30:a5:35:4e:fe:28:eb:e4:a7:34:3d:10:74:e3:
         95:26:d8:48:8b:30:4b:bc:e4:64:75:e2:b2:d7:35:2f:7f:91:
         c1:81:19:5e:62:8f:dc:50:e2:be:e5:15:e2:c1:58:bb:9c:bb:
         56:7a:ea:be:90:30:ed:d7:5f:f1:da:c8:b1:14:f0:28:53:84:
         50:81:95:d1:ad:39:9e:6b:02:1a:b4:f3:76:ab:94:5c:53:aa:
         07:b9:54:4c:d8:c1:75:c0:16:da:82:73:c5:71:55:4a:ae:66:
         8f:f1:56:3b:7c:c2:94:77:c9:b2:99:a7:c7:b8:cd:f1:5d:63:
         bf:33:87:1b:eb:c0:ea:16:84:75:89:9d:65:c3:d1:c6:c1:a4:
         a1:bc:cf:58:2a:d2:d2:c7:ac:11:3c:dd:0c:0a:68:16:3b:b3:
         b5:b6:38:de:a0:09:46:54:19:f7:d2:ea:0f:c1:6f:07:a4:e7:
         0d:51:d4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org